openssl gendh during make install

Alan DeKok aland at deployingradius.com
Fri Feb 19 13:05:53 CET 2016


On Feb 19, 2016, at 4:38 AM, Michael Ströder <michael at stroeder.com> wrote:
> Is it really necessary to invoke "openssl gendh" during "make install"?

  Yes.  The basic install process should create all of the certificates necessary to do basic testing.

> It wastes time on automated build systems, especially when building in VMs for
> armv6. After installing RPMs one would have to regenerate DH params anyway.

  The Debian and RPM packaging scripts don't create those certificates as part of "make install".  So there's no issue there.

  You can stop those files from being created by doing:

$ PACKAGE=yes make install

  Alan DeKok.




More information about the Freeradius-Users mailing list